CVE-2026-59599

Google Android Yayım: 2026-11-10 22:22 (2 saat önce)

Açıklama

Android on supported Pixel devices before security patch level 2026-11-05 allows elevation of privilege in the hypervisor subcomponent in the kernel, aka A-519434175.

Veri: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Bilgiler kaynaktaki haliyle, İngilizce yayımlanır.

Etkilenen ürünler ve sürümler

Üretici	Ürün	Sürümler
Google	Android	Android kernel

Kaynaklar ve yamalar

https://source.android.com/docs/security/bulletin/pixel/2026/2026-11-01

CVSS puanı

Henüz puanlanmadı. CNA, CISA veya NVD puan verdiğinde burada görünür.

Zaman çizelgesi

Numara ayrıldı2026-07-06
Yayımlandı2026-11-10 22:22
IP-DB'ye ulaştı2026-11-10 23:03
Son güncelleme2026-11-10 23:19

Numarayı veren (CNA): Google_Devices
NVD durumu: Received

Kaynakta görüntüle: CVE.org · NVD

Bu ürünlerde yeni bir açık çıktığında haber alın

Android

E-posta uyarılarını aç

Ücretsiz · üyelikle · istediğiniz an kapatılır

Aynı üründe son açıklar — Android

6.7Orta

CVE-2026-58977 8 gün önce

Google Android

In is_valid_header of timed_cache_item.c, there is a possible out-of-bounds write due to a missing bounds check. This could lead to local escalation of privilege with System execution privileges needed. User interaction is not needed for exploitation.

7.8Yüksek

CVE-2026-58930 8 gün önce

Google Android

An unprivileged application can exploit a lack of package/signature validation in SystemUI's `RemoteQCController` when resolving a hardcoded `content://` URI. This allows the attacker to squat on a specific authority if the legitimate package is absent, injec…

6.7Orta

CVE-2026-58927 8 gün önce

Google Android

The vulnerability is a Use-After-Free (UAF) in the EVS AIDL HAL, arising from a data race on an unsynchronized `std::weak_ptr` within `EvsEnumerator::openCamera()`. Specifically, concurrent calls from a privileged UID (e.g., `AID_AUTOMOTIVE_EVS`) can cause a …

2.5Düşük

CVE-2026-58926 8 gün önce

Google Android

A Use-After-Free (UAF) vulnerability exists in the EVS HAL, allowing a privileged client to free a `buffer_handle_t` while the producer thread is still using it. This race condition, triggered via `doneWithFrame` and `setMaxFramesInFlight`, enables an attacke…

7.8Yüksek

CVE-2026-58925 8 gün önce

Google Android

The report details a heap Use-After-Free (UAF) vulnerability within the `android.hardware.automotive.evs-default` HAL service, stemming from unsynchronized access to an `std::unordered_map`. An unprivileged application with access to the EVS manager can trigg…

7.5Yüksek

CVE-2026-58924 8 gün önce

Google Android

The vulnerability is a heap out-of-bounds read in the EVS HAL's `getStreamList()` method. An attacker can craft a `CameraDesc.metadata` byte array, which is parsed without validation, leading to an out-of-bounds read at an attacker-controlled offset within th…